Solved

REmote Desktop Notification.

Posted on 2004-08-03
6
744 Views
Last Modified: 2008-02-26

Hi,
I am looking to find out the easiest/most cost effective way of being notified when someone logs into a windows 2000 server via remote desktop.  We currently have Open View and Cisco works on our network as monitoring tools.  Any help would be greatly appreciated.
0
Comment
Question by:tdisalvo
  • 2
6 Comments
 
LVL 4

Expert Comment

by:exploitedj
ID: 11707736
How do you want to be notified? I would have the 2000 server send an SNMP trap to the CiscoWorks server and have CiscoWorks log the event in it's database, and maybe have Ciscoworks shoot you an email as well.
You should be able to do this with your existing hardware with out buying anything new. Or send the trap to Openview, your druthers.
0
 

Author Comment

by:tdisalvo
ID: 11707907
Ok this is where I get lost.  I have heard that you can have windows 2000 configured to set snmp traps but I have not done this before.  Is there any good resource on how I would be able to set up the trap for this event?
0
 
LVL 25

Accepted Solution

by:
Ron M earned 125 total points
ID: 11711534
put a net send batch file in their startup folder under the all users profile.

net send /domain:yourcomputername "%username% has logged on to TS"

yourcomputername, being the computer you are monitoring from.  You must have messenger service enabled to work.
0
 
LVL 4

Assisted Solution

by:exploitedj
exploitedj earned 125 total points
ID: 11717301
The snmp service is different than the messenger service.
Ciscoworks and HP Openview are more configurable using snmp.
There are two services SNMP and SNMPTRAP in Windows.

For a GOOD rundown read this:
http://www.securityfocus.com/infocus/1301
you will care most about the SNMP event translator
You must have the snmp service running to use evntwin

If you have any questions after reading that article, please post back.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now